CVE-2020-10754

Name of the Vulnerable Software and Affected Versions Network Manager (affected versions not specified)

Description The issue is related to the nmcli command line interface of Network Manager, where incorrect settings are applied when creating a new profile. This allows a remote attacker to access confidential data. Specifically, nmcli does not honor the 802-1x.ca-path and 802-1x.phase2-ca-path settings when creating a new profile, resulting in insecure connections.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.